Description
The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
No history.
Status: PUBLISHED
Assigner: certcc
Published:
Updated: 2024-08-07T13:57:54.637Z
Reserved: 2007-05-30T00:00:00.000Z
Link: CVE-2007-2930
No data.
Status : Modified
Published: 2007-09-12T01:17:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2007-2930
No data.
OpenCVE Enrichment
No data.
Weaknesses